karmada
karmada copied to clipboard
karmada-io
cfssl checksum mismatch
What happened:
GOPROXY=https://goproxy.io go install github.com/cloudflare/cfssl/cmd/[email protected]
go: github.com/cloudflare/cfssl/cmd/[email protected]: github.com/cloudflare/[email protected]: verifying module: checksum mismatch
downloaded: h1:V7EcbVzttAkK3J7PmAxjf7wD7UpMtWSCI+Wl+mu87mw=
sum.golang.org: h1:3T2oQHypP81rykPfkTxOCyJkRU3xQz5SySVahMpN5LE=
What you expected to happen:
How to reproduce it (as minimally and precisely as possible):
Anything else we need to know?:
Environment:
- Karmada version: latest
- kubectl-karmada or karmadactl version (the result of
kubectl-karmada versionorkarmadactl version): - Others:
Can you tell us how to reproduce it?
By the way, can you show the output of go env GOPROXY?
This means that the tag has been force-pushed, and goproxy.io has cached the tag without updating it.
GOPROXY=https://goproxy.io go install github.com/cloudflare/cfssl/cmd/[email protected]
It works well on my side. What's your GOSUMDB?
go env GOSUMDB
docker run --rm -it docker.io/library/golang:alpine sh -c 'GOPROXY=https://goproxy.io go install github.com/cloudflare/cfssl/cmd/[email protected]'
go: downloading github.com/cloudflare/cfssl v1.6.2
go: github.com/cloudflare/cfssl/cmd/[email protected]: github.com/cloudflare/[email protected]: verifying module: checksum mismatch
downloaded: h1:V7EcbVzttAkK3J7PmAxjf7wD7UpMtWSCI+Wl+mu87mw=
sum.golang.org: h1:3T2oQHypP81rykPfkTxOCyJkRU3xQz5SySVahMpN5LE=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
For more information, see 'go help module-auth'.
GOPROXY=https://goproxy.io go install github.com/cloudflare/cfssl/cmd/[email protected]
It works well on my side. What's your
GOSUMDB?go env GOSUMDB
Maybe had cached in your machine
I guess it's the goproxy.io's problem, it might cached the wrong code.
I tested the command you provided, it will return the same SECURITY ERROR as you said.
GOPROXY=https://goproxy.io/ go install github.com/cloudflare/cfssl/cmd/[email protected]
I deleted ~/go/pkg, so there will be no cache. Then I changed to https://goproxy.cn/, everything is fine.
GOPROXY=https://goproxy.cn/ go install github.com/cloudflare/cfssl/cmd/[email protected]
@wzshiming I suggest reporting this issue to goproxy.io.
It may not be a issue of goproxy.io, but rather that github.com/cloudflare/cfssl's tag v1.6.2 has been force-pushed
github.com/cloudflare/cfssl's tag v1.6.2 has been force-pushed
Each version will be cached by proxy.golang.org and sum.golang.org will record the checksum.
If the maintainer re-tagged the version, then we can't install it with sum.golang.org.